ABSTRACT OF THE INVENTION 

A PKI mechanism is facilitated in a bandwidth-limited distributed environment by 
creating a periodic chain of PKI related updates. Changes in CRLs are reflected by periodically 
created DeltaCRL objects that are part of a continuous chain. The DeltaCRL objects allow for 
the iterative generation of an updated CRL from a known base CRL within the timeframe of the 
DeltaCRL chain. Updating of CRL data at bandwidth-limited remote nodes of the distributed 
environment is facilitated by transmitting a relatively small data object instead of transmitting a 
complete and bandwidth-taxing updated CRL. 
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